Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33332e302f32342d3234203d3e203238353436.roa
File:                     3230312e3135302e33332e302f32342d3234203d3e203238353436.roa (raw, json)
Hash identifier:          IV9AAbW3DsMK36AsEsZxVYOwToAp5xRL1uPe/jqyMjE=
Subject key identifier:   4F:FB:43:C8:A1:FD:ED:08:EC:47:6A:16:BC:5C:33:4D:9A:39:F2:E4
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       4A09D1887B7A6DEAB7FFDBB57B67ACC7B68C6C17
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33332e302f32342d3234203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:06 +0000
ROA not before:           Sat 26 Sep 2026 00:55:06 +0000
ROA not after:            Sat 25 Sep 2027 01:00:06 +0000
asID:                     28546
IP address blocks:        201.150.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:09:d1:88:7b:7a:6d:ea:b7:ff:db:b5:7b:67:ac:c7:b6:8c:6c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:06 2026 GMT
            Not After : Sep 25 01:00:06 2027 GMT
        Subject: CN=4FFB43C8A1FDED08EC476A16BC5C334D9A39F2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:67:25:26:ec:99:7a:63:6e:62:34:cf:6e:
                    aa:05:8e:5f:2d:97:2e:83:05:b6:4c:07:53:a7:81:
                    47:7d:4a:da:cc:93:63:37:e7:d4:26:39:2b:6a:2a:
                    7d:ce:d4:e0:7b:f5:34:cb:bb:ff:6e:02:32:17:b7:
                    a1:97:7b:e7:15:a5:94:de:c9:82:68:96:51:1f:91:
                    82:e4:3b:09:dc:d4:4c:bb:6f:8b:0b:b2:cb:77:6e:
                    b9:ab:00:b4:26:a8:d5:b8:bc:dc:da:b1:19:6e:b5:
                    33:0c:3e:19:36:d7:ac:77:94:66:b0:d3:f9:a8:43:
                    20:40:c4:e0:54:4d:02:d7:af:8d:98:92:c2:c7:68:
                    01:b9:e7:80:64:6a:25:81:e6:5c:cc:21:a6:49:8a:
                    aa:58:b2:59:69:e6:05:e4:f3:dd:87:4f:ed:6a:eb:
                    77:f2:45:d6:0e:43:20:db:61:bf:8f:dd:24:2a:b0:
                    ee:6e:b1:93:59:f2:93:fb:d5:91:ad:76:09:d6:18:
                    3c:88:43:df:a5:a9:1b:d8:b1:7b:ba:97:33:66:76:
                    5d:ef:ad:fb:75:76:f3:64:86:2b:18:41:c0:7d:80:
                    9a:d3:32:18:77:af:4b:b5:45:51:65:bf:0e:1e:26:
                    8e:12:9b:21:5b:58:93:00:0f:01:82:93:b3:72:ad:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FB:43:C8:A1:FD:ED:08:EC:47:6A:16:BC:5C:33:4D:9A:39:F2:E4
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33332e302f32342d3234203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:75:0e:9e:c8:84:75:b4:d7:68:08:7b:50:c1:40:23:a3:
         f8:a5:67:3b:fd:fc:6c:4c:45:64:91:5f:07:e1:29:b5:11:47:
         05:41:6d:cb:ce:45:5a:25:2b:0d:62:1a:98:7f:f1:72:e4:da:
         c1:38:4a:02:85:6e:58:74:20:fa:4d:47:61:05:9a:b8:73:d2:
         2a:d4:33:75:37:57:ad:51:93:74:72:b9:39:1a:55:96:41:89:
         d4:76:40:b2:4a:2a:eb:f2:a7:c0:de:3f:05:cc:dd:7a:86:16:
         5a:26:05:26:13:3a:ca:d4:58:79:72:2f:c3:ee:dd:48:ba:54:
         c8:73:3d:9c:f1:88:4b:f4:c9:3d:a5:db:02:dc:9e:02:c7:dc:
         e2:d1:67:db:b3:6d:f0:fb:ac:60:54:49:96:9a:fb:3e:b9:34:
         98:6d:e6:62:0a:24:4e:48:fc:17:78:e4:29:05:62:5e:49:8d:
         90:9f:1a:1d:41:43:fc:9a:82:c2:72:9d:2a:d1:1d:67:22:57:
         42:2c:7e:71:fd:45:6f:72:40:7f:9d:08:4b:6f:8b:12:c7:7b:
         e3:01:3c:97:4a:f5:aa:0b:cb:79:02:62:96:50:ad:33:41:8e:
         51:9d:06:48:77:a2:76:e6:57:ef:4f:60:46:64:a3:7c:51:b1:
         23:d5:51:53
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSgnRiHt6beq3/9u1e2esx7aMbBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNEREMkZFNzE0MDIyMzM3NDgwNzRFNzJGMzUxMzFG
MzA1QjY1QjAeFw0yNjA5MjYwMDU1MDZaFw0yNzA5MjUwMTAwMDZaMDMxMTAvBgNV
BAMTKDRGRkI0M0M4QTFGREVEMDhFQzQ3NkExNkJDNUMzMzREOUEzOUYyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjImclJuyZemNuYjTPbqoFjl8t
ly6DBbZMB1OngUd9StrMk2M359QmOStqKn3O1OB79TTLu/9uAjIXt6GXe+cVpZTe
yYJollEfkYLkOwnc1Ey7b4sLsst3brmrALQmqNW4vNzasRlutTMMPhk216x3lGaw
0/moQyBAxOBUTQLXr42YksLHaAG554BkaiWB5lzMIaZJiqpYsllp5gXk892HT+1q
63fyRdYOQyDbYb+P3SQqsO5usZNZ8pP71ZGtdgnWGDyIQ9+lqRvYsXu6lzNmdl3v
rft1dvNkhisYQcB9gJrTMhh3r0u1RVFlvw4eJo4SmyFbWJMADwGCk7NyrbHJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUT/tDyKH97QjsR2oWvFwzTZo58uQwHwYDVR0j
BBgwFoAUEwTdL+cUAiM3SAdOcvNRMfMFtlswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODk5NkNEMjY1QkEzNDIwQjJDQjIwM0Y1NTQzNTI2RUM5
RTVBREIzRTMzRDk5REE4REVCMzFEQTIzMjIzRUVCLzAvMTMwNEREMkZFNzE0MDIy
MzM3NDgwNzRFNzJGMzUxMzFGMzA1QjY1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzA0REQyRkU3MTQwMjIzMzc0
ODA3NEU3MkYzNTEzMUYzMDVCNjVCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg5OTZDRDI2NUJBMzQyMEIyQ0IyMDNGNTU0MzUyNkVDOUU1QURCM0Uz
M0Q5OURBOERFQjMxREEyMzIyM0VFQi8wLzMyMzAzMTJlMzEzNTMwMmUzMzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM1MzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmWITAN
BgkqhkiG9w0BAQsFAAOCAQEAg551Dp7IhHW012gIe1DBQCOj+KVnO/38bExFZJFf
B+EptRFHBUFty85FWiUrDWIamH/xcuTawThKAoVuWHQg+k1HYQWauHPSKtQzdTdX
rVGTdHK5ORpVlkGJ1HZAskoq6/KnwN4/BczdeoYWWiYFJhM6ytRYeXIvw+7dSLpU
yHM9nPGIS/TJPaXbAtyeAsfc4tFn27Nt8PusYFRJlpr7Prk0mG3mYgokTkj8F3jk
KQViXkmNkJ8aHUFD/JqCwnKdKtEdZyJXQix+cf1Fb3JAf50IS2+LEsd74wE8l0r1
qgvLeQJillCtM0GOUZ0GSHeiduZX709gRmSjfFGxI9VRUw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:59:59 2026 by rpki-client